Senior Director Analyst, Cryptography, Remote United States

What you’ll do: 

As a Senior Director Analyst you will meet with clients every day, via video conference and sometimes onsite at Gartner conferences. As an analyst, you will engage with clients to support their most challenging business initiatives, ultimately helping them to make the right decisions for their role and their business.  To support these conversations you will research markets, practices and trends and produce written research for Gartner clients to download and apply. You will collaborate with peers and become a published author on Gartner.com showcasing your own thought-leading research, growing your knowledge and your brand as a Gartner Analyst. 

• Conduct research and analysis in data security, with a focus on encryption, PKI, post-quantum cryptography, key and certificate management  

• Respond to client questions and deliver high quality actionable advice through a variety of media.  

• Write high quality, clear, actionable, content focused on strategic and practical considerations of cryptography, encryption, key and certificate management.  

• Predict how crypto-discovery, key and certificate management markets are developing, help clients in their selection process and provide feedback to vendors on emerging trends in buyer needs. 

• Remain ahead of the curve on developments and issues within these specified areas, through peer collaboration from the data security, privacy, and identity and access management teams. 

• Proactively work with the wider sales organization and deliver outstanding sales support in order to retain and grow the business 

What you’ll need:  

It helps to be obsessed with your topic! Gartner analysts are correctly viewed as THE experts. This means you will need to further develop your knowledge of your markets, vendors, trends, management practices. Gartner Analysts are team players who value expert insights, bold ideas and intellectual courage.  

• Subject matter familiarity in cryptography and encryption with the ability to demonstrate understanding of the security, compliance, and business benefits and emerging technologies in those markets.  

• Help us see the future & be creative. You must be a lifelong learner with foundational knowledge and experience in cryptography, encryption, PKI, key and certificate management , HSMs and Cybersecurity in general. 

• An understanding of data and cloud security concepts and markets, including key and certificate management for human and machine identities and cloud infrastructure. 

• Familiarity with the encryption and cryptography management vendors like Entrust, IBM, Keyfactor and Thales 

• Familiarity with security considerations for cloud, SaaS and on-premise environments and how they are impacted by quantum computing and privacy and data security requirements. 

• Fundamentals of Cryptography, for example: 

• Symmetric Key Cryptography: Understanding of algorithms like AES, DES, and their modes of operation. 

• Asymmetric Key Cryptography: Knowledge of algorithms like RSA, ECC, DH, ML-KEM, ML-DSA and SLH-DSA, and their use in digital signatures and key exchange. 

• Hash Functions: Familiarity with hash functions like SHA-2, SHA-3, and their applications in data integrity and authentication. 

• Cryptographic Protocols: Understanding of protocols like SSL/TLS, SSH, and others used in secure communications. 

• Computer Science and Engineering Knowledge, for example: 

• Computer Networks and Security: Understanding of how cryptography is applied in various network security protocols. 

• Software Development Skills: Knowledge of how cryptographic algorithms and protocols are used in applications and familiarity with standard APIs e.g. PKCS#11 

• Security Principles and Practices: 

• Knowledge of Security Standards: Familiarity with standards like FIPS, Common Criteria, and ISO/IEC 27001. CNSA 2.0, DORA. 

• Security Architecture and Models: Understanding of how cryptographic techniques fit into overall security architectures, for example by using HSMs, Cloud Key Management Services as well as the applicable hybrid and multi-cloud implementations. 

• Current and Emerging Technologies: 

• Postquantum Cryptography: Awareness of the developments in quantum computing and their implications for current cryptographic techniques. 

• Blockchain and Cryptocurrencies: Understanding the cryptographic principles behind blockchain technologies and digital currencies. 

• Compliance and Regulatory Considerations: 

• Compliance and Regulations: Awareness of laws and regulations related to cryptography, such as export controls and data protection laws (e.g., GDPR, HIPAA). 

• Practical Experience: 

• Real-World Implementation: Experience in implementing, staffing and operating cryptographic and key management solutions in diverse environments. 

• Experience participating in matrixed projects and providing guidance regarding key management tools and cryptographic standards with a focus on crypto-agility. 

• Business Acumen. Understand how an organization operates (risks and opportunities) and the drivers of a company's performance. 

• Intellectual Agility. Analytical thinker with the ability to process and understand information quickly, diagnose the issue in order to take positions and make actionable intelligent recommendations. 

• Collaboration. Can collaborate productively, build relationships, and move work forward with internal partners and clients. 

• Communication. Can engage in clear, effective dialogue on complex concepts, and communicate them with poise. 

• Leadership and Influence. Persuades, encourages, or gains the support of others and causes them to take action. 

• Ownership & Impact. Accepts personal accountability, takes ownership and perseveres. Embrace feedback. 

• Minimum of 12 years of experience in a research, or technology, related role  

• Bachelor's or equivalent experience. 

• Ability and willingness  to conduct occasional travel, regionally and globally